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Amendments to the specification : 

On page 2, last paragraph to page 3, second paragraph, please amend the paragraphs as follows: 

In accordance with the foregoing and other objectives, the present invention proposes an 
authorization method and system for storing and retrieving data, The authorization method for 
storing and retrieving data of the invention is applied to an authorization system for connecting a 
terminal device to a resource system established by ani application service provider (ASP) via a 
network, so as to allow the ASP to authorize a user at the terminal device to interact therewith 
for data storage and retrieval, wherein the authorization system is pre-constructed with a 
database and an authorization account. The database includes a plurality of user's data for 
identifying the user submitting a request for l e ginning logging into t he resource system, and the 
authorization account is used for authorizing the user to store and retrieve the resource system, 

The authorization method for storing and retrieving data comprises the steps of: (1) 
receiving user's data inputted by the user to the terminal device via the authorization system; (2) 
comparing the user's data transmitted from the terminal device with the user's data stored in the 
database via the authorization system, wherein if no user's data in the database matches the user's 
data transmitted from the terminal device, then step (3) is followed; if one of the user's data in 
the database matches the user's data transmitted from the terminal device, then step (4) is 
followed; (3) sending a message of failure in loginning logging into the resource system via the 
authorization system to the terminal device, and allowing the user at the terminal device to re- 
input user's data for loginning - logging into the resource system; then returning to the step (1); 
and (4) sending an authorization account via the authorization system to the resource system, and 
transmitting data generated by the resource system to the terminal device, so as to allow the user 
at the terminal device to interact with the resource system for data storage and retrieval. 
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On page 3, last line to page 4, first paragraph, please amend the paragraph as follows: 

The authorization system for storing and retrieving data comprises: a database for 
establishing user's data for storing and retrieving the resource system; a receiving module for 
receiving user's data for loginning longing into the resource system inputted by the user at the 
terminal device; an identifying module for comparing the user's data transmitted from the 
receiving module with the user's data stored in the database; a replying module for responding 
according to compared results from the identifying module, wherein if no user's data in the 
database matches the user's data inputted by the user, the replying module sends a message of 
failure in logmning -logging into t he resource system to the user at the terminal device, and 
allows the user to re-input user's data for loginning logging into t he resource system; if one of the 
user's data in the database matches the user's data inputted by the user, the replying module 
generates a message of permission for loginning logging into t he resource system; a managing 
module having an authorization account for loginning logging into the resource system, wherein 
the managing module sends an authorization account to the resource system according to the 
permission message transmitted from the replying module, so as to allow the terminal device to 
interact with the resource system for data storage and retrieval after the authorization account is 
identified by the resource system; and a processing module for processing data generated by the 
interaction between the terminal device and the resource system, so as to display the data in the 
form of a web page on a browser of the terminal device. 

On page 6, lines 3-14, please amend the paragraph as follows: 

The receiving module 21 is used to receive user's data inputted for toginning logging into 
the resource system 3 as requested by the user at the terminal device 1 . After the terminal device 
1 is connected to the authorization system 2 via a network, the authorization system 2 transmits a 
table form to the browser 10, for allowing the user at the terminal device 1 to act in response to 
the table form displayed on the browser 10. That is, when the user at the terminal device 1 inputs 
the user's data, the browser 10 submits a login request to the authorization system 2 in the use of 
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hyper text transfer protocol (HTTP), and then the authorization system 2 generates a proper 
response according to the login request and displays associated website data corresponding to the 
generated response. Since the browser, the HTTP and data processing between the terminal 
device 1 and the authorization system 2 are conventional, they are not further described herein. 

On page 6, last paragraph to page 7, first paragraph, please amend the paragraphs as follows: 

The replying module 23 responds according to compared results from the identifying 
module 22. If no user's data in the database 20 compared by the identifying module 22 matches 
the user's data inputted by the user at the terminal device I, the replying module 23 sends a 
message of failure in loginmn | g - logging into t he resource system 3 to the user at the terminal 
device 1, for allowing the user to re-input user's data for loginning logging into t he resource 
system 3. Therefore, if the re-input user's data matches one of the user's data in the database 20, 
the replying module 23 sends a message of permission for loginning logging into t he resource 
system 3 to the managing module 24. 

The managing module 24 contains an authorisation account for loginning - logging into the 
resource system 3 provided by the ASP, That is, upon receiving the permission message 
transmitted from the replying module 23, the managing module 24 sends an authorization 
account to the resource system 3 of the ASP, After the resource system 3 identifies the 
authorization account, the terminal device 1 and the resource system 3 can be interacted with 
each other for data storage and retrieval 

On page 7, last paragraph to page 8, first paragraph, please amend the paragraph as follows:' 

Compared to the condition for installing a start-up program in the terminal device 1 and 
purchasing authorization (an authorization account) for loginning logging into the resource 
system 3 as depicted in the prior art, in the use of the authorization system 2 of the invention, 
after the user is identified in identity, the authorization system 2 uses an authorization account 
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for submitting a login request for data storage and retrieval to the resource system 3 established 
by the ASP, so as to allow the user at the terminal device 1 to store and retrieve the resource 
system 3. Therefore, the authorization system 2 of the invention can significantly reduce costs 
for an enterprise in purchasing authorization (the authorization account) from the ASP, and 
simplifies installation and arrangement of the start-up program. 



On page 8, last two full paragraphs, please amend the paragraphs as follows: 

In step S4, the replying module 23 generates and sends a message of failure in togimring 
logging into the resource system 3 to the terminal device 1, for allowing the user at the terminal 
device \ to re-input user's data for loginiiing logging into t he resource system 3. Thereafter, the 
step SI is returned. 

In step S5, the replying module 23 generates and sends a message of permission for 
loflinmng - logging into t he resource system 3 to the managing module 24. Thereafter, step S6 is 
followed. 
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